Microsoft ended support for Windows 10 on 14 October 2025. A year on, plenty of businesses still have Windows 10 devices in daily use, often because the hardware can’t run Windows 11, or because a key application hasn’t been tested on it yet. If that sounds familiar, now is a good time to review your plan, because the cost and risk of staying put grow every year.
Key takeaways
- Windows 10 security updates ended on 14 October 2025.
- Business Extended Security Updates run to October 2028, doubling in price each year.
- Upgrading or replacing devices is the only long-term fix.
- Start with an audit of every Windows 10 device you have.
What Windows 10 end of support means
Windows 10 still works, but without a paid Extended Security Updates (ESU) licence it no longer receives security fixes. Every new vulnerability discovered from now on stays open on those devices. Attackers know this, and unsupported systems are a common route into business networks.
There are knock-on effects too. Unsupported operating systems can mean a failed Cyber Essentials assessment, questions from your cyber insurer, and software vendors gradually dropping support for their own applications.
Your options
1. Upgrade to Windows 11
If a device meets the Windows 11 hardware requirements, upgrading is usually the simplest and cheapest route. Test your key applications first, upgrade in planned batches, and make sure devices are backed up beforehand.
2. Replace older devices
Many PCs bought before 2018 can’t run Windows 11. Replacing them is an opportunity to standardise your devices, improve security with modern hardware features, and bring everything under central management.
3. Buy Extended Security Updates, as a stopgap
Microsoft offers business ESU licences for up to three years after end of support, until October 2028. The price doubles each year, so ESU is best used to buy time for a planned migration rather than as a long-term solution. Details are on Microsoft’s ESU page.
4. Move to a cloud or virtual desktop
For some organisations, especially those with older devices or hybrid teams, a hosted or virtual desktop can extend the life of existing hardware while moving the operating system and data onto a secure, supported platform.
Building your plan
- Audit your devices. Identify every Windows 10 machine, including the one in the corner running a single legacy application.
- Check compatibility. Find out which devices can run Windows 11 and which applications need testing.
- Prioritise by risk. Devices used for email, finance and remote access should move first.
- Budget over time. Spreading replacements across the year avoids a single large spend.
- Document the decision. If you do keep any Windows 10 devices on ESU, record why and when they’ll be replaced.
How we can help
Device lifecycle planning is part of our managed IT services. We’ll audit your estate, test your applications, and plan and carry out upgrades with minimal disruption. If a cloud desktop might suit you better, our cloud team can talk you through the options.
Not sure where you stand? Our free cyber security checklist includes a quick check on supported software, or you can contact us for a chat.